Evidence · DiggingBeagle record
Advisory: gh-aw MCP compilation status fixed .tmp filename allows symlink overwrite and world-readable report
The GitHub Agentic Workflows MCP compiler wrote progress status using a predictable .tmp path. Local filesystem entries could redirect the write through a symbolic link or retain permissive file modes. GHSA-796w-fvw2-ccmp documents the possible overwrite and status disclosure under the compiler process permissions; it is a local preplant condition rather than an unauthenticated remote exploit. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
The GitHub Agentic Workflows MCP compiler wrote progress status using a predictable .tmp path. Local filesystem entries could redirect the write through a symbolic link or retain permissive file modes. GHSA-796w-fvw2-ccmp documents the possible overwrite and status disclosure under the compiler process permissions; it is a local preplant condition rather than an unauthenticated remote exploit. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsGitHub Agentic Workflows compilation status used a predictable symlinkable temp path: GHSA-796w-fvw2-ccmp documents the possible overwrite and status disclosure under the compiler process permissions; it is a local preplant condition rather than an unauthenticated remote exploit.
GHSA-796w-fvw2-ccmp; writeMCPCompileProgress implementation and patch
- supportsGitHub Agentic Workflows compilation status used a predictable symlinkable temp path: The GitHub Agentic Workflows MCP compiler wrote progress status using a predictable .tmp path. Local filesystem entries could redirect the write through a symbolic link or retain permissive file modes.
GHSA-796w-fvw2-ccmp; writeMCPCompileProgress implementation and patch
- supportsGitHub Agentic Workflows compilation status used a predictable symlinkable temp path: The GitHub Agentic Workflows progress-file weakness includes following an existing symbolic link for its predictable .tmp file and retaining a pre-existing world-readable mode despite an attempted 0600 write. It requires local filesystem prepositioning.
GHSA-796w-fvw2-ccmp: progress write, symlink behavior and file mode